Hi, I'm a developer of an authoritative nameserver (delphinusdnsd) and I've always developed this on OpenBSD. Lately I've been putting DNSSEC functionality into this daemon and almost completed RFC 4034 which includes NSEC,DS,RRSIG and DNSKEY RR's. I'd like to go further and put in RFC 5155 (NSEC3 and NSEC3PARAM) but I'm stuck at the dnssec-signzone command on OpenBSD 5.7.
I can't find the -3 - option to generate NSEC3 RR's with dnssec-signzone. Am I reading the manual page wrong or is this a missing feature? If it is I'll probably leave NSEC3 out. Thanks for your helpful hints. -peter
